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(57) Abstract: When a packet is received 
from a partner device (3) connected to the 
Internet (2), a filter information storage 
unit (15) is referenced according to the 
transmission source and transmission 
destination IP address/port number in the 
packet and the protocol and a decryption 
judgment unit (16) judges whether to 
perform decryption or bypass. If it is 
judged to perform decryption, the reception 
packet is decrypted according to encrypted 
communication path information agreed 
in advance by the partner device (3) and 
a terminal device (5) not having the IPSec 
function and the reception packet is sent to 
the terminal device (5) from the encryption 
path information storage unit (12). The 
encrypted conununication path information 
is used to estabHsh a packet communication 
path based on the IPSec between the 
partner device (3) and the terminal device 
(5) and includes an identification number, 
protocol information on the encryption 
process or signature process, encryption 
algorithm, key information, IP address/port 
number, and the like. The partner can use 
the transport mode. 
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^^-iJ^—^^-zhO^ip^li^a^-efeSIETF (Internet Engineering Task Force) {Z.^'OW, 

(C^pftSibyciIPSec (Security Architecture for Internet Protocol) ;65RFC (Request for 
Comments) 2401 (^^JlT^#fP:S:itl^lq^.S^) (cl^^tl/TV ^(DmSO^^Wmztxi 
Y^;V(r>W^h\^X^ SSL (Secure Sockets Layer)-^LS (Transport Layer Security) 

Security Association)tt^^-^igLT*3<o ;i(^SA|f ^(D-g^icfi^ #i^ife:/nh3/V 
■efcSiKE (Internet Key Exchange)■^^^>'K->'Ji— ^ (Handshake):7"nhat/H-ipg|L 

[0003] IPSecaifef* > i£l>S{CJ^;;CT«^^g{cSI^$ft-5„ IPSec^igfi^omt-. -T^-iS? 

IPSec^^^-f-^ VPN (Virtual Private Network) \Z.^\1f^^<^vY^^^WXW^^ 

o^«9^Jx.{^-Y:^i5'—^iyhtLAN (Local Area Network) ^g^J^-TS 

S(WT. rtla5iiS7fc^S^iq^^)(;iftoT^N"<>-iyh(c^«ilt-^MS^^T5o o*t)^ 
^^i5'-^5/h(c^^$ttytiiS7feigg(^T. «^g*/c{i*@#^gi:iq^^) fi, LA 
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%:WtMl^tz^<^yh^±0.U ^<Dy<^iyh^mimir^o :i(D^<'^yh^^mi.fc^—h 

mmm^yh^-^imm^in.rcrf^^^Mmmi^rtnL^xmhmmK.it 0 

#WWM<2f^2003-304227-^<2:^ (&.r^m^Xmm^) \Z^^thX\^ (SXT. 

M8^0mi.x:z(D!wwxMii'i^i-^^M(Dy<^yhm^f^mi^mmm^um'^^ 
io4mi^iff^^ntc^—j^^—h^^4io8%:^L,xm-B-mm^n% ^^f^/— k ( 

22t^gpy-hno6tiit-S-^bMft^ff5fcJ?)(7)7^-i5'Bt^'fbi:m^'fto^S^,^ 

[0005] ^la5y-Kl06;05iit-^iiftOjggj,^^5j^^(;^{^^gpy_PlOgj^^^^^ 

ixh^. ^^F^y— K<D«^^lx:^s;?122{C3^S(S21)o ^(Dm-^mmM^^<^yh(^(D 
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[0006] Bt-^iift^^^^^Jr^/h^^fsbfc^lHSy— Kioefi. mM^titc.m-^mini^'^— 

^b^tLfcy^— i?x^<5r5,h^^artf— x^l20iCa^m't-S (S25)o mM<D^mi^^'0 

rm^^t^thfcy'—^y<^^yh^^m\^fcmmfH'^—y<i2ou. ^(r>^\muz.'f—^ 
m.mf^y-h'122 m^\^:^i:^) iz.^(Dm^ih^ifvfcy'-i$^^<^yh^mm-r^ (S26) 

^mm:h%:htc/:i:<Xh. ^M(Dn^Xh^^^y—Vi06t(Dm-^mm%:m^'f-^ 
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2003-289299#<5^^(i^JLT. ^f^:SCit3^iq^^) \^^^^X\^^, 

^^^mimmm (^i^Tv^^:;^t^^^wtm\.x^<'^yh^mm-r^'jmf)^^^o 

\H^-^<i2oxm. ^<-^yV(Dmm^<Di^m^^m^mmm^i^^^v') i22xh 

n^i^i-ti^Tm^i^>i^i22izMvm^mmm^^n':>xi^n'^-^<<Dm^^^ii^ 
^^i^X'^-y<i2oicMvm-^mmr^n^^t^<Dw^m^^nxm-^^t^<>!r^yht: 



^WXm: 0;*:®#fFmm^M2OO3-3O4227:^<^# 
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WWXmS: 0;^®#fFmiS<2^§i2OO3-289299-^<^$g 
^Wff'XlSkl : RFC (Request for Comments) 2401 

<t^lBlig|S{-iB1t$tb-CV ^-5Bt-^3Mftl^1t#{cS<5v ^X^^-^Mibmi^fi^o 

^<'^yv\zM'r^m^^m. m7j(im^ibmt>ti^tL)sb. r:»'t^^m^mmn.vT^:^ 

(D-^—y<(DWT\^U^j:}£^m^\^Xm'^^m^flfz.^<^^yh^^^ 



wo 2005/099170 



6 



PCT/JP2005/006624 



[0013] mi]^<DmMKx?>y<>yiyhw^^-iikmi^mmm(Dmimmm(D^y^y^j^mm'i^^ 
m5^^(Dmmicx^y<>yyhm^iiQ:mitmmm(Dm2mmm(Di^:^y'jm^m^^ 

[0014] ^<Dmn<DmMm\z.^\ ^T. mm^^ML^x^m-r^o 

<5v ^xnom^^mtx^. ^"^^^tx.xm^it^mjSLXf^^it'^wkmt-r^o 
^w;^^^^.mm^mmMffam(0}^M^mu5\zj.AN4^i!v\^xmu^fix 
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^^Mm^mmmi^ecizmmii.tch<Dxh<o.>^M<Dmimc9c±-^n^mm3t 
[0016] m^mimmmmmm2i^^ ^\:^it^mm^(Dmm.mm^^oxmm^ti^o 

9S-^iaftl^tt# i^T. ^iZ rSA (Security Association) If #J i:V >5) {i#^#fp:ft:g)t 

j. tft (;iif A^tt. ^-^^^y M^<^ii{t rt^^^-r»J#-^SPI (Security 
Parameter Index) , (2) Wm^—^'^-^'mi'^m^Xm.m.. '^tc^(D^m^ff^rc 
ItXD-^vi AH (Authentication Header) RXJ^Mim'r—f'^UW.L-X^mi. 

^ *:^C^<^^E^I?^fS;fe:Jt)(D^nh=i/l'-efe§ESP (Encapsulating Security 
Payload)<7)fRJ4x;6^<^:7'l3h=iyVC>1f $B^^i--k:^ai;x-f:/nh=3/vtH#. (3) Bf-^^fb 

^IP-^5'i5^^^i?)TBt-^^bb-C^ft^^tei^f'5^-K-C^§h:^^/P^-K^U?, 
K-efcSh^^:^2K— h^— K<^Mn;ei^<^^— K^^-r^— Kit (5) tS^lPTHV 
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-a-J*^- Kit ^i:L-C h V^/i'^- ttfc«9 h7i^>^2K- tbfcO i-:5o 
^s^^A/-et>:ev ^J;5 i^ir^bAHZ^u h=i/v, ^[IxLfix-f ^tl? 

[0018] SAlf IKE (Internet Key Exchange) ^Ofi^^:7"n h=^M^ 

mm^y^/i-^mmtL.xmm-r^^^/^^mmmmm5t.m^mm3izxoxm: 

im^titi^<^^yh^m-^^mi3izX<>XM-^it't^:d^^7()^^^^ju^mm^^ 

xmmir^m-^^mmm6^m^x\^ 

^^Mi^Mm\^xmm^tix\^^^:7^/u^mm^^mun^mm3{zx^xi:^mmu 
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[0020] igi2B{i. y^/\^i$'mm(Dm^m\^fcmx-h^o m2Bizm ^r. im i ^<^^yh(D 

/^^S'^f#^cJ;^9:7^/^^J?tt^|Stigt;l5^cfcb:0^C^C)fEti$;^^TV^-5:7^'/^i5^ft#^# 

[002 1] m2B^(DinB (oy^jv^mm \-t^ ipsec^igsr^u-c/^v ^m^mm. Kn-f-^mn 

IPTK^';^;6SIPv4{Cj;oT«;6^^^T*5«5. i^ff 7C<DIPTKV^;5no.0.0.1/32( 
^32tVhit^), 5^{t3feOIPTHV;?^;dSi0.0.0.*/24(±'(&24tVh;65it^, Ti&Slf 

nh=i/^-e^>^tcp (Transmission Control Protocol) (D^-^lClfi, as^flTn^— h#-^^ 
t;«3^fB^jK— h#-^^5fpj#-e$,o-Ct> (any) . ^H^^tf #}*+B^igm3(Ccto-C 

[0022] 2ff S <^:7>ryl'i$rff ^(^^Qp|p^^3g^^{;^£pgn,l^^,3^p h^;v\Y>Sec(Dm.^^m 

i-SSffi7fe^e5{C^i-§:7^/^i5'if^(D^J-efe«9.i^m5cIPTK^^;dno.0.0.2/32. 
2im^IPTK^;5^>6Sio.0.1.*/24<DBt-^^S$tb/c/-?^:yh^^(D^«pfe^g5{;i^^ 

l^;^^52001::K 3t{t3fc(DIPTKW;^;iS2001::2. -^^nV^jV^UHjl^ H^^^^OiB 
User datagram protocol) "Cfct). a^ft7n<^xK— h#-^^a^'ft^(DJK— h#-^^;6Si37 
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K^;^^S200i::2/i28. ':fvh^Mmntinpmp^m±^=I:^\>ti—/v•r^■:^vh^/^^-<^h 

Sicmp (Internet Control Message Protocol) ^ JlO^^ J^ff TCt^^K— h#-^dSi35<7[)^ 

:dmM^tix\^ f—^'^DAmpsecizmmi.tis^^iiim^thx^^ 
[0024] m-^^tmmm6it^m\^f^y<^yh^(Dz^^j^^i^mmKm-^^:7^j)^^mmmm 

<D^iyymm^HD^0mu mm^yy7im:h\i^nx\^ ^^7!)>^7^^mmi^fz.m^. 
ma^tix^j:\^^tm^\^tcm'^. f ^^^p*>. ^(Dy^^tryhmpsedzmmiLxm^^t^ 

^■^-iryhBt-^^Sfta^glOtCf*, ARP (Address Resolution Protocol. T}^'U^m 
^:/pl>=i/V)j^NDP (Neighbor Discovery Protocol , 3fiP^M::/i3h=i/H^^^*<?5tt 
$R>DlA>^nh=i/VJ^, UPnP (Universal Plug and Pla.y)^J:t^(D^:MLmUm^^h^t^ 

ii^^mm5(DiPTh^uy^^-^—\f:;^m(Dm^mm^i^Mu uMi^fcmmtmcm 
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\^^^i^—^:yy<^m■^^^^m^\^^XnihrL^o ^^*5. ^^t^^ai^yi^fi: (integrity 
Check Value, ICV) mmT/\-=^V^M'l^-:>Xlk&^ti^TJi^=tVP^J^1,^^-^XW 

m^ti^o ^■^'itmmm6{cx<oy^j^^^mm^0m\^x^m^<^iyuzM't?)^m 
iyh^m-^mm^nxf3:\^t^mvf:im-^i'im-^^Mi3xy<^yh<Dm^it^^ 

imm'im-^\^^x.^^mm5izx<^xmm^nfcy<>^iyh^w^'^>imi8i,cx^xm 
im^i^fzy<^yh^lPSec^cmm^^x^<^yh(Dmm7ctmm^/c^mK.^^ 
U5{^^-:>xmm^i^.fz.^<^^yh^^^it\.xmmir^t\ ^b^^«3(c^o«^5' 
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x^M^t}^ti^<^^-i$':d^RB^^tifzSAmm:dKm'^mm^mmmmm2izm^ 
[0029] msit^ ^■^^^yhm^^mi\mmmmzx^m^mm37b^^<D^my<^yU::M'r 

immmn^mmpTh^u:;^icMfi:^vxm^mm^mmmmm2izm^j2^A.x^T 
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r^m^irifcy<>yyh^^^m^<^^yh^mm7izx^xmm^ti^ip^T^y^s^ 

—:^.:^v'^y^S6X^'yhu--:!^^^^i^yau4;^9izx<>X^m^tifcy<^^yhj!^^^ 
^^h<DXh^tmWt^rifc^Kit^ ^^yh\7-^-C>i$^:7zi,^pk9izx<>X^im^tifc 

l^AN4^lffl.Xii^^mm5izmm^ti(:^Ty':fS9) . :^Tyysiizm<^X^(Dy<^ 
[0031] ::^y'y:fS5X\ ^yh^—:!^^>i^^a^^P^9izXoX^m^tlfc^<'yyh^i^Mmm5 

i^^<ot.i^i^M^:^1$'yzl^^y^l4^^l.xmm•t^tm■^^mm^ 1 6 izx^xmm^ ■ 
^-c>'i^y^^:^i4s,xn.AN4^^\^xmMmm5izmm^ti^ (y^Tiyys9) » 

ft j^tf ^c^-a^^t^frv ■^M^tifcmimmm^i^^iPTVuy^icn!t.\^x9U-^m 
[0032] :^y'y:^si2x^my<^yHmmmm(D-^M^m^\^x\^^fj:n^it^m'^^h 

h^s^'^itir^i)^^:d^7!)mm^th(^y'^yysi4). m^^hvfi:\^tmm^ti^t. m 
^c^tc}^ , 't<D^m^nfcy<^iyh7!>^m'^immm9{zx^xmm^tvb {^^-v 

>^S18)o 
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[0033] ^'r^y^Si4X-y<^iyh%:m-^^t^^t¥m^ntcm^ia^.ii^^^>^:7a.4^^ 
^y"-y-:^si5X^^4>^'7zn^;^i4izx-oX^m^titcy<^^yh^m^mm3i^^ 

(^'^^^iyh'p—:i74>^7a^^^9^^\^xmmir^tm^^tmmui9Kx<>xmm 

'^^yhmmmiRx^23mmm.m^M22t^mui.tch<Dx^^, m^x^ ^m^< 
^iyh i^M-r^^nmnm^m i^m 3Rxf4xmm i^tz^mt m cxh<o. m.m =kmm 

[0034] ^<^^yhmmmmwmm3:^^h<D^my<^yh^^m^mmmmm<D'a-M^m 

23i^^mm5^^h(D^my<>^^yh7!)mm(Dmf^%:m^i^x\^ ^^7:)^^mmu m^v 
'^^^^^^nmimmm^Mmu^xmmmm3tm^mimmm<D^M^n 
v\ ■B-M^t\^rcm^mimmn(sAmn)^m-^mimmmmmm2izw^^^t^ 

[0035] men^ ^^^M3t)^h(D^m^<^yhi^Mir^^<^yhm^iii}imixmmm:ioi^^ 
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[0036] ^y'y-:^s2-3x\^m^<^yht^m-^mm^mm'^M^m'imi-^h<Dxfj:\^^^^^ 

•^i^ltlm^\z.\'t. :^'r-y:^S2-AX^(0^m^<^yHz:m^rcx\ ^^SA.'^m.^m^ 

tm-xf)^-:>^mmmii^mwi:sAmmi)m\z.m^m^mimd.'m^i2\z.^m.^ 

[0037] y^T^yZ^SZ-lX^ +B^^«3^^E$tVfcSAtf ^{i, ^^5/7^S3-2T'flt-^iiftj^ 

^^^^'^Th^^^::^<Dm^mw\m-r^y^;v^mmi^^m\.xmt%(Dm^mw 

imm^mmmmmu22izx^xii^M-f>^:7a.^:;^i4^^i.xi^^mm5icmmv 
[0038] :^Ty^sz-zxii^^mw:^m^mmmm^mK.xfj:\^ ^tm^x^tcm^i^x. ^(d^ 
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?>9^-^Mm^^M^m^^-r^vt—^^—hXh^o lll7o;=^7^-/:/si2- i~si2-4 

tf TOitgBisiciEit^ixTv ^^tnM^ntcm^i^, ^imy<^-yh^mm(Dmit^m 

[0040] ;^7^5':/si2-3-e^N-<jr2/h;6Siiiftto§|jt&^^^^t-t><^T*>fev ^^^Jf|if$Hfc#^(;i 

mm3t^M^ti^o 

[0041] ^7^5/^S13-l■T?^B^^e3i:'a'iC$^^fctf#«,^7^5/:/S13-2T'fft^ii^t^ 

:^tfj:^x\^^^m^iz^<Dii^^mm:it.m^mmmm^mK.x\^^^tm^i-^o 
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[0042] ^T^y^si3-3xmMmm:7(fm^mmmm^m^xfj:\^ ^tm^i.tcm^n. 

i^TiyZfSlUcm^X^<Dy<^>yh^^mir^o 

[0043] ^±.xm.mut. ^mmmm:^^2mMm\z^^^<'^^yY^^-^miX'^m.io 
mmm(Dm^n, y<^^yhmm^2i,23^±myoy^j>^^mn'r^=^>ii'^—^K 

[0044] m^mmmnmmmm2Rxf^^/]^^mmmmm5(D^ib{i^fj:<th-:^ 

(fP$tbfc)i^^^(DflJffi#(Cj;^9^M$tL/^V^j;5^;I. IC^—V. USB (Universal 
Serial Bus)=ar— , SD (Secure Digital) ;^^i;;&—K^^if<7), m^:^y<i^(Dh^mM'^1l^ 

— 9t ^aft j^if ^lEtigis 1 2Ru:7^/i^^mmmm^ 1 505 *)^^^< — 
j^<D^m^xh^f£hit. mmvt:imm(D{i^fj:< th-m^^-^x^^^o i^vxi^x 
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VX<^mmm<DIPTh^u:;'.:^mQirtH'£X< . Bt-^^3®f^a^g(DIPTKi^^^ffi V ^ 

^(D^m(Dy<^^yhm^mmixmmmio\'X4'^^—:^yh2ti!^Mmm:5t(Dmicm 

[0047] IPSecmtgf*IP^|gO-|HS^bT^^$tv5„ IJ^oT^^lC^oV ^-C^*-^^-^!>al-r(?^ 
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iyhu--i^mmmm^6iz.:z(Dmmw'i(D^<'y^yhm-B-^mixmmmiio^mm^xhx 

'tx^i^mK.itmmi^<Dy<—y-r/i-=^:^ii'^—^fj:t^<Dipmm^h-:>^M 

Mmm7t(Dmi^^<DmijLi^m2mmm<Dy<^yhm-^iii}imri.mmmiio^WAi. 
xhx\\^^m^mm:5i^^>i^-:^yh2t^mm'im.mmu^^x\,^^m^x 
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nm-^immme. ^my<^iymmMi7^ m^^tms^^mv^^th, ^vw—i^ 

^®5(cj^fti-5wi:;6s-e#, flt-^^a^ig$?'^<-obJ;v v^^^yhtei^b-cBf-^^a 
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